You can provide either authorization levels ('read', 'edit', 'attr', 'admin') or action names ('browse', 'upload', 'source') as the second argument to CondAuth().

When using CondAuth() or other similar functions it's important to remember to place them as late as possible in your config.php to avoid various caching issues which can be very difficult to troubleshoot otherwise. CondAuth causes the cache(s) to be populated, which may cause problems by code further down expecting unpopulated caches.